$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: I8PZJjO9kekNiF37Pb8dFsx/cQoQu5jpcXH5oGz0YhY= Subject key identifier: 29:84:9F:45:1F:5B:01:F9:42:57:F5:0C:F9:00:38:F7:BA:ED:AD:DF Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 03C6 Signing time: Mon 21 Jul 2025 00:53:07 +0000 Manifest this update: Mon 21 Jul 2025 00:53:06 +0000 Manifest next update: Mon 28 Jul 2025 00:53:06 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: 4J7QVXILAIF6yy2K5mIi0UB8TspX1JspaRG+3wtHcMQ=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Jul 21 00:53:06 2025 GMT Not After : Jul 28 00:53:06 2025 GMT Subject: CN=687d8f73-033e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:d5:62:76:22:9c:08:fc:30:f6:b8:b8:00: 21:a7:b0:54:c5:54:d8:ab:71:34:f6:77:b7:08:43: 21:d3:d5:3d:d9:34:70:32:7d:71:65:8d:9c:50:26: a0:c2:ee:5e:ff:58:9b:71:02:08:44:36:07:35:60: 93:59:85:32:f0:78:fd:03:bc:cb:a7:63:64:72:3a: 28:39:d6:62:fa:16:09:3b:b3:aa:7f:d6:75:c4:49: c9:b3:dd:d7:29:9a:96:5d:23:ed:ec:3c:52:b1:05: 31:e7:43:67:4e:85:44:9f:3c:15:58:6a:a9:3b:4d: 07:79:73:b2:f1:45:20:cc:b6:8d:2e:0e:3d:cb:25: e6:01:11:9a:ae:9c:ca:db:3e:e0:91:12:37:0f:21: 46:60:3d:78:4e:3b:d0:80:a0:bf:62:6e:75:8d:65: 8c:82:64:10:22:2c:16:40:ba:16:a5:94:4f:d1:b8: ee:53:a6:51:16:d2:15:8a:72:43:00:04:24:97:29: 73:59:00:f2:8e:16:cb:96:85:ab:27:89:06:91:82: 33:01:13:ad:6a:ab:ae:5d:52:f1:71:78:ad:13:29: 07:2c:fb:66:a9:cd:c9:75:8c:81:99:6f:b8:c8:79: b7:d4:dd:7a:5a:d4:c0:9a:b1:28:17:9f:76:cf:19: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:9F:45:1F:5B:01:F9:42:57:F5:0C:F9:00:38:F7:BA:ED:AD:DF X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0b:f0:e8:8e:ee:27:2d:33:e6:d5:63:99:d8:bb:71:0e:c8: 63:a4:89:4b:0e:e2:12:77:ed:77:12:29:a0:72:34:80:63:76: 7c:ba:12:6d:67:0d:5e:da:ee:c9:da:b9:4d:e2:4e:68:67:2f: cb:5a:b6:d5:f3:f6:5b:f8:57:e9:76:6e:63:85:2c:c8:15:90: 96:96:50:b1:50:bd:67:ff:64:a1:64:0c:47:a2:1c:4d:af:06: ce:84:87:c1:ae:57:3b:a5:91:68:06:30:41:b2:94:91:75:1b: 93:de:af:a6:1d:96:09:6c:69:9a:b6:86:4e:3d:ef:d8:8f:f5: 2b:e3:07:e9:9f:89:38:71:b4:63:e2:5f:70:3f:5e:1f:81:4a: c9:78:f6:ae:37:13:d9:30:2c:d4:04:97:0c:f8:4a:3f:ae:0c: 99:36:de:a2:c5:39:4e:a2:57:cc:25:db:49:d9:bc:7c:1c:36: b0:b9:89:e7:d7:93:9b:0c:4a:7d:53:9e:92:4c:2f:a6:ab:97: c6:0a:1b:dd:c6:ec:0c:61:b7:58:93:68:fd:57:3b:68:a1:d6: 14:69:d3:ad:a8:5d:e7:3f:b1:96:33:63:0f:ba:ad:32:0a:30: 37:b0:ae:98:e0:55:22:4a:18:48:8f:8b:ce:8c:3f:b7:c7:b1: 7e:90:ee:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjUwNzIxMDA1MzA2WhcNMjUwNzI4MDA1MzA2WjAYMRYwFAYD VQQDEw02ODdkOGY3My0wMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUrVYnYinAj8MPa4uAAhp7BUxVTYq3E09ne3CEMh09U92TRwMn1xZY2cUCag wu5e/1ibcQIIRDYHNWCTWYUy8Hj9A7zLp2NkcjooOdZi+hYJO7Oqf9Z1xEnJs93X KZqWXSPt7DxSsQUx50NnToVEnzwVWGqpO00HeXOy8UUgzLaNLg49yyXmARGarpzK 2z7gkRI3DyFGYD14TjvQgKC/Ym51jWWMgmQQIiwWQLoWpZRP0bjuU6ZRFtIVinJD AAQklylzWQDyjhbLloWrJ4kGkYIzAROtaquuXVLxcXitEykHLPtmqc3JdYyBmW+4 yHm31N16WtTAmrEoF592zxmAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmEn0Uf WwH5Qlf1DPkAOPe67a3fMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgC/Doju4nLTPm1WOZ2LtxDshjpIlLDuISd+13EimgcjSAY3Z8uhJt Zw1e2u7J2rlN4k5oZy/LWrbV8/Zb+Ffpdm5jhSzIFZCWllCxUL1n/2ShZAxHohxN rwbOhIfBrlc7pZFoBjBBspSRdRuT3q+mHZYJbGmatoZOPe/Yj/Ur4wfpn4k4cbRj 4l9wP14fgUrJePauNxPZMCzUBJcM+Eo/rgyZNt6ixTlOolfMJdtJ2bx8HDawuYnn 15ObDEp9U56STC+mq5fGChvdxuwMYbdYk2j9VztoodYUadOtqF3nP7GWM2MPuq0y CjA3sK6Y4FUiShhIj4vOjD+3x7F+kO7e -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:15 2025 by rpki-client